Static task
static1
Behavioral task
behavioral1
Sample
f1df42ee030c23ed5f954e1b25ebc87ef0d6e981bd22e9347c220be2024ba85e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1df42ee030c23ed5f954e1b25ebc87ef0d6e981bd22e9347c220be2024ba85e.exe
Resource
win10v2004-20220812-en
General
-
Target
f1df42ee030c23ed5f954e1b25ebc87ef0d6e981bd22e9347c220be2024ba85e
-
Size
61KB
-
MD5
0ece1e20119ac6c4532e9cf7e530f060
-
SHA1
29a7fbaec0dd8d8773f1c73e92a161c9e90386da
-
SHA256
f1df42ee030c23ed5f954e1b25ebc87ef0d6e981bd22e9347c220be2024ba85e
-
SHA512
dd2c842ce1797926270c1b1a1ef6da466e0a700a447ab096db1cbe85458beba5e4606492d2090fb40edecca922bbdc5e47814115b233f45cdb993626086632a9
-
SSDEEP
768:gAegUkqWxDD6ffo9XBaqRsYy8JVhqdMtohFUnmqoOls6wqNLSO9PR0uoaMdi+q+H:HeLpWtD6Ho9XD9PhqdWv68QiLtsjH
Malware Config
Signatures
Files
-
f1df42ee030c23ed5f954e1b25ebc87ef0d6e981bd22e9347c220be2024ba85e.exe windows x86
202a758981453b038ba541efca58467d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperA
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateProcessA
ExitProcess
FindClose
FindFirstFileA
FlushFileBuffers
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentThreadId
GetEnvironmentStringsA
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetTimeZoneInformation
GetVersion
LoadLibraryA
MultiByteToWideChar
ReadConsoleInputA
ReadFile
SetConsoleCtrlHandler
SetConsoleMode
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFilePointer
SetStdHandle
SetUnhandledExceptionFilter
Sleep
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile
Sections
AUTO Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ